The hub in Fabric for finding, exploring and governing the items you have access to, split into Explore and Govern tabs. Tenant settings can now be reached from OneLake catalog > Govern too.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains OneLake catalog in context, with comparison tables and the common traps.
Terms in this definition
- Virtual hub
Inside a Virtual WAN, a VNet managed by Microsoft that contains the hub router plus the VPN, ExpressRoute and User VPN gateways. Typically there is one per region, but several hubs can share a region.
- Govern
The part of the Cloud Adoption Framework concerned with keeping cloud use under control by setting guardrails made of policies, procedures and tools. It runs continuously across the estate alongside Secure and Manage.
- Tenant settings
Admins in Fabric flip these toggles to enable or disable features across an organisation, either globally, just for chosen security groups, or excluding certain groups. Recent releases moved them to OneLake catalog > Govern > Configurations.
Related terms
- Admin monitoring workspace
A preview workspace for Fabric admins that appears automatically when an admin first visits Admin monitoring under Workspaces. Its data is read-only and refreshed daily, powering reports like the Govern report in the OneLake catalog, and admins can give others access with the Viewer role.
- Domain
A way of grouping workspaces by area of the business, in support of a data mesh approach. Items take on their workspace's domain, letting you filter the OneLake catalog by it, and certain tenant settings can be passed to domain admins; domains have no effect on access permissions.
- Feature usage and adoption report
An admin monitoring report, still in preview, giving a month's view of Fabric activity plus an item inventory. Microsoft has said it will stay in preview and recommends the Govern report in the OneLake catalog as its replacement.
- Govern tab
A OneLake catalog area offering governance insights plus suggested next steps. It is also becoming the home for admin settings (tenant, capacity, workspace and domain management) that used to live solely in the Admin portal.
- Semantic model discoverability
Provided discovery tenant settings allow it, people lacking access can spot promoted or certified semantic models through OneLake catalog search and ask for Build permission. This grants nothing by itself; it is not a security control.